Nicholas, On Wednesday, 2012-04-11 06:28:49 -0700, Nicholas Weaver <nwea...@icsi.berkeley.edu> wrote: > b) Actually, I think it should also be auto removed once the > condition is fixed: Continue to attempt to validate the zone in > question. When the zone validates again, the default behavior should > be to automatically remove the negative trust anchor.
That's a very good idea, at least as an option. (I know some administrators never want anything to happen automatically. Some people love extra work, or at least are paranoid about computers getting stuff wrong.) -- Shane _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop